Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: Xytx9NEuFOYmFH5VjGezzE1GVbkowJF0sjV9sktY3ns=
Subject key identifier: 3B:F3:D2:EE:10:7B:13:E1:86:79:84:89:83:E9:FE:6B:7B:84:88:C7
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 019A706DEC79F7438279C9A42AE5D53FE0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 1437
Signing time: Tue 11 Nov 2025 01:00:43 +0000
Manifest this update: Tue 11 Nov 2025 01:00:43 +0000
Manifest next update: Wed 12 Nov 2025 01:00:43 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: M7FB0dTSgPk3Oo+GpeVfQzXLjWEwHVl4sAQh0RrY9DM=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:ec:79:f7:43:82:79:c9:a4:2a:e5:d5:3f:e0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Nov 11 01:00:43 2025 GMT
Not After : Nov 12 01:00:43 2025 GMT
Subject: CN=3bf3d2ee107b13e18679848983e9fe6b7b8488c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:09:01:f4:a3:ff:ab:1d:36:ab:f7:f7:e5:
eb:7c:cd:8e:df:3f:70:3d:e6:9d:12:71:b8:d1:57:
54:69:3d:98:5a:6a:62:ad:f9:2e:b4:f0:d8:9c:3b:
07:3e:c9:05:8c:c6:dd:ac:8f:48:e4:b8:94:6d:d3:
30:d0:27:23:c2:3c:4e:17:33:f0:ea:fa:0b:04:ee:
1e:82:e3:9a:6f:7a:d0:1b:0a:85:cd:73:1f:63:67:
38:0b:56:91:a4:67:1e:6d:ea:a5:e6:64:83:9d:de:
aa:9f:f2:68:16:ef:db:00:83:21:f8:24:05:e9:73:
d5:89:a6:b0:b1:f4:9a:f8:51:ba:d1:c6:21:0c:ba:
5a:29:c5:6e:29:cb:b9:cf:12:f2:dc:49:3b:95:fb:
2f:52:25:a0:22:fd:05:b3:dc:cd:54:c1:57:d5:40:
a8:91:00:7c:cd:8e:78:8a:1c:36:d9:61:f4:75:a0:
17:b2:61:f7:aa:d0:f2:7c:7d:c1:9f:c3:1c:18:ef:
a2:57:ec:13:e9:62:c0:7b:7c:0d:eb:74:5d:ba:11:
9e:40:4d:37:84:23:c6:7d:1d:81:e8:cb:5f:28:53:
58:69:9f:85:38:63:02:55:9a:5c:bd:65:38:a7:f7:
11:ee:f9:ae:21:59:ac:ed:2c:38:15:48:20:de:7d:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:D2:EE:10:7B:13:E1:86:79:84:89:83:E9:FE:6B:7B:84:88:C7
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:15:3d:64:44:23:d5:9c:67:17:f4:67:74:f6:32:51:fb:
02:7c:fb:44:c6:df:bc:6d:0e:88:ec:79:1f:a6:72:00:82:4b:
c7:d5:0f:c7:25:b2:de:21:4c:45:02:7e:5f:02:ac:ee:09:9b:
9d:33:c3:d9:72:5e:80:36:70:d5:c2:79:26:7b:90:2b:6b:f6:
0e:5b:72:a3:6c:1c:3d:17:e7:27:dc:b4:7b:a3:09:df:9b:ab:
dd:2c:c5:49:c2:02:ce:7c:f7:7d:ea:c3:fb:07:c5:dc:4d:54:
4e:ea:9f:cf:26:f4:40:dc:76:2a:ec:0d:d0:cc:41:11:98:b4:
5f:3d:95:4a:20:df:eb:98:15:46:c5:6d:2b:da:c9:e6:d9:77:
9c:b6:6e:77:3a:d9:df:77:ee:43:ed:5f:2e:d4:a5:57:63:45:
81:a2:23:c1:2e:3b:f9:a7:06:24:86:58:15:c4:4b:0e:3f:5a:
ff:7d:42:bd:7a:d5:82:f9:41:68:11:b3:49:07:0f:7e:f3:9a:
28:fb:89:9b:e5:10:cc:64:ae:9a:4a:89:8f:e8:b2:05:2f:4c:
b4:20:24:79:52:29:1b:9c:1a:30:3b:a7:44:5c:99:87:9b:f0:
d3:67:82:43:e0:32:17:06:6f:c7:b6:8e:7b:59:53:df:87:e5:
c3:78:64:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbex590OCecmkKuXVP+DgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5
MTE5MjgwHhcNMjUxMTExMDEwMDQzWhcNMjUxMTEyMDEwMDQzWjAzMTEwLwYDVQQD
EygzYmYzZDJlZTEwN2IxM2UxODY3OTg0ODk4M2U5ZmU2YjdiODQ4OGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutAJAfSj/6sdNqv39+XrfM2O3z9w
PeadEnG40VdUaT2YWmpirfkutPDYnDsHPskFjMbdrI9I5LiUbdMw0CcjwjxOFzPw
6voLBO4eguOab3rQGwqFzXMfY2c4C1aRpGcebeql5mSDnd6qn/JoFu/bAIMh+CQF
6XPViaawsfSa+FG60cYhDLpaKcVuKcu5zxLy3Ek7lfsvUiWgIv0Fs9zNVMFX1UCo
kQB8zY54ihw22WH0daAXsmH3qtDyfH3Bn8McGO+iV+wT6WLAe3wN63RduhGeQE03
hCPGfR2B6MtfKFNYaZ+FOGMCVZpcvWU4p/cR7vmuIVms7Sw4FUgg3n1OlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvz0u4QexPhhnmEiYPp/mt7hIjHMB8GA1UdIwQY
MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt
MTIzYTg2ZDk0ODE4LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4
LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9wVPWRE
I9WcZxf0Z3T2MlH7Anz7RMbfvG0OiOx5H6ZyAIJLx9UPxyWy3iFMRQJ+XwKs7gmb
nTPD2XJegDZw1cJ5JnuQK2v2Dltyo2wcPRfnJ9y0e6MJ35ur3SzFScICznz3ferD
+wfF3E1UTuqfzyb0QNx2KuwN0MxBEZi0Xz2VSiDf65gVRsVtK9rJ5tl3nLZudzrZ
33fuQ+1fLtSlV2NFgaIjwS47+acGJIZYFcRLDj9a/31CvXrVgvlBaBGzSQcPfvOa
KPuJm+UQzGSumkqJj+iyBS9MtCAkeVIpG5waMDunRFyZh5vw02eCQ+AyFwZvx7aO
e1lT34flw3hkQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client